From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 8A40A138AE9 for ; Sun, 26 Nov 2017 21:13:30 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id BE13FE0ECC; Sun, 26 Nov 2017 21:13:29 +0000 (UTC) Received: from mail-wr0-x244.google.com (mail-wr0-x244.google.com [IPv6:2a00:1450:400c:c0c::244]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 79250E0ECC for ; Sun, 26 Nov 2017 21:13:29 +0000 (UTC) Received: by mail-wr0-x244.google.com with SMTP id w95so24655377wrc.2 for ; Sun, 26 Nov 2017 13:13:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to; bh=9Wygk/Rg1/yJGNoB6vzoxzJt6uERSsZHPNzFqjqluas=; b=eLTKO1NmK+YYgJBY1gWiuR41tp6hRUGfI99WvHbCj/QzzdGg53tTbLQHJL61iYlQCX PmANZazqXXS6SrbxMnT52zj95drfOgUjTJnvTdfaZRVPZfB2FkUW1/iNWfVnME/AQUTr j1ce71zfvX2/dPB1bShjEw1MlJTjaarq3ji+/+u4Oo4QQV823oKuL90mM6/deaULt40s 856qDLbX9tsBjrQXx6GcRbCRXOOZeIwA7piQtasTqDD3HaVCmguEtjoqK+WBXK8xaZpg AcGR43gHfBYQn+WZGaxyCr0Ezw+nhFEw3OCxSce5MInEY9Mebkdq2yXoqFAXsSdACk4p aLqQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to; bh=9Wygk/Rg1/yJGNoB6vzoxzJt6uERSsZHPNzFqjqluas=; b=JyghUuiO8vEusscOOqVQgyrOLw2xKqQN0r80+VMxfCuCI69f5U0VnX7MOK24aN5vq0 5jRfOpQtNMuJPJG3AJcRd17dEfUgLrYJF4n95hC3cuWuQm710jSU0WOznW7BHL7JsTZx TBkrp81/cTDh0MZMHMwor5HNhdwenc+ZX7HtYpBnE8JqzdRiZeQ5ZMyyU2CXBv+xVG63 WPh1jRM3EKW1XNWBwbb1b+z5TDSK5rpDgWgw+0IeT0CAJoN5xJnu6R7c5JpOKhdJZzaw /NZoiQqVjXYkrbTAvS3rytqk77mO8hepcplb5Nk5TtmkoApfwcbE4AATz1M+sK79OJa1 uamQ== X-Gm-Message-State: AJaThX6UMHcQLFm72e3OpWwb4cFANcIveLtf20fHQPiym/I7OW1wqBqu udf61R1cVkMeFa5b9SaaXGsiQxG9wHFSoCtyPjDp X-Google-Smtp-Source: AGs4zMb+9TTPxVp3nNYfcJF6b/iU58kxpdIusO5+lcnmH2knJEioCdISC5nLrUecYyWT9Mrvc5GpUYvb2SYEfqOXl6k= X-Received: by 10.223.196.247 with SMTP id o52mr29897074wrf.119.1511730807734; Sun, 26 Nov 2017 13:13:27 -0800 (PST) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-nfp@lists.gentoo.org Reply-To: gentoo-nfp@lists.gentoo.org MIME-Version: 1.0 Sender: comprookie2000@gmail.com Received: by 10.28.148.149 with HTTP; Sun, 26 Nov 2017 13:13:27 -0800 (PST) In-Reply-To: <20171126210616.GA12059@clocktown> References: <22915.1353.636537.877268@a1i15.kph.uni-mainz.de> <20171126210616.GA12059@clocktown> From: David Abbott Date: Sun, 26 Nov 2017 16:13:27 -0500 X-Google-Sender-Auth: 56TLZ_j1UuUvTbORXhBLh1wHQpo Message-ID: Subject: Re: [gentoo-nfp] PGP fingerprints of Foundation members (item for Trustees meeting) To: gentoo-nfp Content-Type: text/plain; charset="UTF-8" X-Archives-Salt: ce8fcf3b-e032-4eba-b3d5-9572231d070e X-Archives-Hash: dd933c78e65554a14ae374b8a0631841 On Sun, Nov 26, 2017 at 4:06 PM, Daniel Campbell wrote: > On Thu, Aug 03, 2017 at 01:13:13PM +0200, Ulrich Mueller wrote: >> As discussed with prometheanfire in #gentoo-trustees, I am suggesting >> the following as an item for the (September?) Trustees meeting. >> >> Apparently, the Foundation only has a list of PGP key IDs in >> https://wiki.gentoo.org/wiki/Foundation:Member_List. Even worse, most >> IDs listed there are only 32 bit IDs, providing no security at all. >> >> I would like to ask the Foundation to keep a list with the (160 bit) >> PGP fingerprints of its members. (For developers, this information >> should be readily available in LDAP.) >> >> Ulrich > > Great idea. I'm willing to update this information: do I need anything beyond > LDAP access + keyserver reference to do this? I also noticed it hasn't been > updated since July; do we have a file somewhere that has non-developer members > to cross-reference? Not that I am aware, their email is stored somewhere, Robin should know. I keep a local copy but its not posted anywhere so the spam bots don't get them. > > Changing from Key ID to fingerprint shouldn't be a problem; it'll just > be a wider table. > > -- > Daniel Campbell - Gentoo Developer, Trustee, Treasurer > OpenPGP Key: 0x1EA055D6 @ hkp://keys.gnupg.net > fpr: AE03 9064 AE00 053C 270C 1DE4 6F7A 9091 1EA0 55D6 -- David Abbott (dabbott) Gentoo Foundation Secretary http://dev.gentoo.org/~dabbott/